cotizacion-dolar-argentina
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- EXTERNAL_DOWNLOADS (LOW): The skill makes network requests to
https://dolarapi.com. While this domain is not on the pre-approved whitelist, it is a documented public API necessary for the skill's primary purpose of retrieving currency exchange rates. - COMMAND_EXECUTION (LOW): The skill workflow explicitly instructs the agent to use
curlandjqfor data retrieval and parsing. This is consistent with its intended functionality and does not involve privilege escalation or unauthorized system modification. - INDIRECT_PROMPT_INJECTION (LOW): The skill ingests untrusted data from an external API.
- Ingestion points: API responses from
dolarapi.com/v1/*. - Boundary markers: None explicitly defined in the prompt instructions, though it uses structured JSON parsing.
- Capability inventory: Uses
curlandjqfor network access and data processing. - Sanitization: Relies on
jqfor parsing, which reduces the risk of malicious payload execution, though it lacks explicit output sanitization before presenting results to the user.
Audit Metadata